This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Certificate

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/adSSvj_PjMWoWckEjFD9QL_bd4c.cer
File:                     adSSvj_PjMWoWckEjFD9QL_bd4c.cer (raw, json)
Hash identifier:          H13LwJuNj0cnv1Rzfrunv9pZ9kQZwrup2Oro8wD0pdw=
Subject key identifier:   69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer:       /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial:       019B7BA38865FA34DAC7EBC8C5DAE86DC768
Authority info access:    rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest:                 rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
caRepository:             rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/
Notify URL:               https://rrdp.ripe.net/notification.xml
Certificate not before:   Thu 01 Jan 2026 22:17:53 +0000
Certificate not after:    Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources:    AS: 49761
                          IP: 95.215.76.0/22
                          IP: 109.197.39.0/24
                          IP: 193.28.226.0/24
                          IP: 193.37.140.0/24
                          IP: 195.211.8.0/22
                          IP: 2001:67c:c90::/48
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 14:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7b:a3:88:65:fa:34:da:c7:eb:c8:c5:da:e8:6d:c7:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
        Validity
            Not Before: Jan  1 22:17:53 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69d492be3fcf8cc5a859c9048c50fd40bfdb7787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:7a:5e:d0:99:45:c3:f6:7d:88:50:85:7f:
                    b0:f5:71:2c:39:0a:c2:db:41:be:b9:60:73:16:b4:
                    49:3d:57:34:84:c1:43:8c:2c:2c:23:e9:e9:de:96:
                    d8:01:1d:97:4e:cf:9e:ec:c4:05:7b:11:ac:7c:64:
                    e2:53:84:03:e0:93:71:77:20:13:a6:96:9f:04:15:
                    21:9e:97:be:43:b8:a1:01:10:26:ab:23:7b:9c:bb:
                    8a:4a:d7:47:d2:37:95:33:cc:8c:3e:46:27:66:bb:
                    f3:64:30:5c:52:bf:d6:8c:eb:9d:2c:c6:20:28:59:
                    16:48:b7:cd:50:8f:b9:5f:66:f8:02:17:dd:88:56:
                    54:57:ed:ae:ce:09:08:d8:f6:4f:3d:f3:d6:2a:52:
                    b8:09:9c:8b:3e:e6:31:92:fd:df:38:a5:cc:b9:1b:
                    1e:15:58:28:16:de:e7:87:51:f1:1a:bf:80:3b:a2:
                    0a:32:10:f7:8c:64:eb:dd:6b:84:41:2e:05:2f:cb:
                    13:2b:a8:f7:ec:e3:ba:a9:75:c0:73:87:0e:3a:39:
                    20:3e:07:11:15:9b:80:56:12:08:63:a0:02:17:6f:
                    32:d0:5b:57:29:f1:e0:88:cb:7e:4d:39:6d:74:ea:
                    b5:d9:53:84:43:fd:e1:a6:8a:d6:56:ec:ce:11:d6:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D4:92:BE:3F:CF:8C:C5:A8:59:C9:04:8C:50:FD:40:BF:DB:77:87
            X509v3 Authority Key Identifier:
                keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer

            Subject Information Access:
                CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/
                RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b58d51-1ace-490e-8c2e-59208babeb13/1/adSSvj_PjMWoWckEjFD9QL_bd4c.mft
                RPKI Notify - URI:https://rrdp.ripe.net/notification.xml

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.76.0/22
                  109.197.39.0/24
                  193.28.226.0/24
                  193.37.140.0/24
                  195.211.8.0/22
                IPv6:
                  2001:67c:c90::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  49761

    Signature Algorithm: sha256WithRSAEncryption
         7e:d7:8f:3b:e0:8e:11:d2:2c:bf:ce:15:d5:8f:07:3b:99:a3:
         0e:3e:c5:c7:a0:1d:ea:c9:88:7d:2d:ed:f9:16:43:c6:59:cb:
         9a:4d:39:b5:91:4a:1c:9d:0e:ea:58:3c:ce:b0:b6:33:18:39:
         cc:dd:36:15:11:cc:a0:25:0e:3a:5e:4b:52:97:a7:18:99:d4:
         1b:89:58:19:4d:8f:a5:42:9f:f5:ae:c8:0c:1f:fa:12:5f:90:
         46:e6:8e:39:e8:8a:98:69:02:b5:fb:df:79:ed:ee:a8:dd:6e:
         cf:7f:86:0c:7f:21:98:76:40:08:62:b5:d5:b3:90:29:f8:41:
         f5:c5:9f:bd:c1:f8:1c:45:c4:2c:0b:6f:93:a7:cc:98:a0:0a:
         b2:42:86:cd:0f:95:66:d1:b8:41:ff:cc:14:53:4f:c5:0c:bc:
         b6:e5:70:2c:b6:2e:3e:9c:c6:f3:53:a5:8a:a0:4e:cd:02:7d:
         db:6f:67:94:c9:b5:f6:c0:78:e2:a5:7d:0c:d0:59:8c:c3:b4:
         69:89:86:df:62:0b:79:c6:44:7a:2f:fa:89:43:07:b0:77:1a:
         de:02:79:bf:f1:37:83:71:43:ca:1a:72:11:ec:d5:45:2a:aa:
         8b:04:dc:cf:6e:c9:d6:79:df:11:59:8b:3a:6e:9b:a9:78:11:
         48:eb:9e:6c
-----BEGIN CERTIFICATE-----
MIIFvTCCBKWgAwIBAgISAZt7o4hl+jTax+vIxdrobcdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjYwMTAxMjIxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWQ0OTJiZTNmY2Y4Y2M1YTg1OWM5MDQ4YzUwZmQ0MGJmZGI3Nzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobR6XtCZRcP2fYhQhX+w9XEsOQrC
20G+uWBzFrRJPVc0hMFDjCwsI+np3pbYAR2XTs+e7MQFexGsfGTiU4QD4JNxdyAT
ppafBBUhnpe+Q7ihARAmqyN7nLuKStdH0jeVM8yMPkYnZrvzZDBcUr/WjOudLMYg
KFkWSLfNUI+5X2b4AhfdiFZUV+2uzgkI2PZPPfPWKlK4CZyLPuYxkv3fOKXMuRse
FVgoFt7nh1HxGr+AO6IKMhD3jGTr3WuEQS4FL8sTK6j37OO6qXXAc4cOOjkgPgcR
FZuAVhIIY6ACF28y0FtXKfHgiMt+TTltdOq12VOEQ/3hporWVuzOEdYF+QIDAQAB
o4ICyTCCAsUwHQYDVR0OBBYEFGnUkr4/z4zFqFnJBIxQ/UC/23eHMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2VhL2I1OGQ1
MS0xYWNlLTQ5MGUtOGMyZS01OTIwOGJhYmViMTMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWEvYjU4ZDUx
LTFhY2UtNDkwZS04YzJlLTU5MjA4YmFiZWIxMy8xL2FkU1N2al9Qak1Xb1dja0Vq
RkQ5UUxfYmQ0Yy5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMEgGCCsGAQUF
BwEHAQH/BDkwNzAkBAIAATAeAwQCX9dMAwQAbcUnAwQAwRziAwQAwSWMAwQCw9MI
MA8EAgACMAkDBwAgAQZ8DJAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMJhMA0G
CSqGSIb3DQEBCwUAA4IBAQB+14874I4R0iy/zhXVjwc7maMOPsXHoB3qyYh9Le35
FkPGWcuaTTm1kUocnQ7qWDzOsLYzGDnM3TYVEcygJQ46XktSl6cYmdQbiVgZTY+l
Qp/1rsgMH/oSX5BG5o456IqYaQK1+9957e6o3W7Pf4YMfyGYdkAIYrXVs5Ap+EH1
xZ+9wfgcRcQsC2+Tp8yYoAqyQobND5Vm0bhB/8wUU0/FDLy25XAsti4+nMbzU6WK
oE7NAn3bb2eUybX2wHjipX0M0FmMw7RpiYbfYgt5xkR6L/qJQwewdxreAnm/8TeD
cUPKGnIR7NVFKqqLBNzPbsnWed8RWYs6bpupeBFI655s
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:58 2026 by rpki-client